ASEC Weekly Malware Statistics (November 8th, 2021 – November 14th, 2021) - ASEC BLOG
Tags
| country: | Switzerland |
| maec-delivery-vectors: | Watering Hole |
| attack-pattern: | Domains - T1583.001 Domains - T1584.001 Keylogging - T1056.001 Keylogging - T1417.001 Malware - T1587.001 Malware - T1588.001 Server - T1583.004 Server - T1584.004 Software - T1592.002 Tool - T1588.002 |
Common Information
| Type | Value |
|---|---|
| UUID | 52f25d36-aef6-4dbf-9f88-ceee2382a633 |
| Fingerprint | ad0c3d28adfb0293 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Nov. 19, 2021, 3 a.m. |
| Added to db | Sept. 11, 2022, 4:59 p.m. |
| Last updated | Nov. 17, 2024, 11:36 p.m. |
| Headline | ASEC Weekly Malware Statistics (November 8th, 2021 – November 14th, 2021) |
| Title | ASEC Weekly Malware Statistics (November 8th, 2021 – November 14th, 2021) - ASEC BLOG |
| Detected Hints/Tags/Attributes | 45/3/175 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://asec.ahnlab.com/en/28835/ |
URL Provider
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 5 | gcl-gb.biz |
|
| Details | Domain | 2 | g-localdevice.biz |
|
| Details | Domain | 1 | dorasandeau.xyz |
|
| Details | Domain | 1 | teylerityah.xyz |
|
| Details | Domain | 1 | leanaengama.xyz |
|
| Details | Domain | 1 | mail.metalbo.es |
|
| Details | Domain | 1 | metalbo.es |
|
| Details | Domain | 1 | origina.sbs |
|
| Details | Domain | 2 | mail.kpnmail.nl |
|
| Details | Domain | 2 | kpnmail.nl |
|
| Details | Domain | 1175 | gmail.com |
|
| Details | Domain | 3 | mail.modularelect.com |
|
| Details | Domain | 4 | modularelect.com |
|
| Details | Domain | 1 | www.awsul.online |
|
| Details | Domain | 1 | www.baipees.com |
|
| Details | Domain | 1 | www.bake8teen.com |
|
| Details | Domain | 1 | www.bella-pi.com |
|
| Details | Domain | 3 | www.bitrice23.com |
|
| Details | Domain | 2 | www.bits-clicks.com |
|
| Details | Domain | 3 | www.busy-clicks.com |
|
| Details | Domain | 1 | www.ckoutim.xyz |
|
| Details | Domain | 1 | www.confled.online |
|
| Details | Domain | 1 | www.dress-ads.com |
|
| Details | Domain | 2 | www.easybeasts.com |
|
| Details | Domain | 3 | www.gulebic.com |
|
| Details | Domain | 1 | www.high-clicks2.com |
|
| Details | Domain | 3 | www.jam-nins.com |
|
| Details | Domain | 1 | www.japxo.online |
|
| Details | Domain | 1 | www.lutam.xyz |
|
| Details | Domain | 1 | www.makrep.online |
|
| Details | Domain | 2 | www.mcabyv.xyz |
|
| Details | Domain | 1 | www.minismi2.com |
|
| Details | Domain | 2 | www.posetac.online |
|
| Details | Domain | 1 | www.proach.online |
|
| Details | Domain | 2 | www.ranbix.com |
|
| Details | Domain | 1 | www.rebles45.com |
|
| Details | Domain | 7 | www.renaziv.online |
|
| Details | Domain | 4 | www.saint444.com |
|
| Details | Domain | 1 | www.sarjin.xyz |
|
| Details | Domain | 2 | www.seo-clicks7.com |
|
| Details | Domain | 1 | www.smaclo.online |
|
| Details | Domain | 1 | www.stamore.online |
|
| Details | Domain | 1 | www.tamsef.online |
|
| Details | Domain | 1 | www.welmovs.xyz |
|
| Details | Domain | 1 | www.yaruky.xyz |
|
| Details | Domain | 4 | 74f26d34ffff049368a6cff8812f86ee.gq |
|
| Details | Domain | 2 | peakledz.xyz |
|
| Details | Domain | 10 | secure01-redirect.net |
|
| Details | 1 | metalbo@metalbo.es |
||
| Details | 1 | origin@origina.sbs |
||
| Details | 2 | tabakspeciaalzaak.everse@kpnmail.nl |
||
| Details | 2 | mamaputmamaput175@gmail.com |
||
| Details | 4 | zspamming@modularelect.com |
||
| Details | File | 1 | r100-xh50.exe |
|
| Details | File | 1 | __p_o.exe |
|
| Details | File | 3 | _pdf.exe |
|
| Details | File | 1 | mdc.exe |
|
| Details | File | 1 | advice_payment_copy.exe |
|
| Details | File | 17 | details.exe |
|
| Details | File | 1 | details__of_payment.exe |
|
| Details | File | 1 | doc2035678923456789320.pdf |
|
| Details | File | 1 | dynamicpartitionerforienumerab.exe |
|
| Details | File | 1 | e-invoice_no_11073490.exe |
|
| Details | File | 1 | eqi-newtuo160.exe |
|
| Details | File | 1 | ftg00123.exe |
|
| Details | File | 1 | urgentepdf.exe |
|
| Details | File | 95 | pdf.exe |
|
| Details | File | 1 | invoice_and_packing_list.exe |
|
| Details | File | 1 | invoice_no__ant19-20646.exe |
|
| Details | File | 1 | order_confirmation.exe |
|
| Details | File | 4 | payment_advice.exe |
|
| Details | File | 1 | payment_transfer.exe |
|
| Details | File | 1 | 11092021.exe |
|
| Details | File | 1 | pohg18100405.exe |
|
| Details | File | 1 | product_quotation_0921218383.exe |
|
| Details | File | 2 | request_for_quotation.exe |
|
| Details | File | 4 | mt103.exe |
|
| Details | File | 1 | cnxt-hg20211109_pdf.exe |
|
| Details | File | 1 | rfq__cnx.exe |
|
| Details | File | 14 | order.pdf |
|
| Details | File | 2 | gz.exe |
|
| Details | File | 1 | scb_mt103_31526r2111120067_211112.exe |
|
| Details | File | 3 | shipping_documents.exe |
|
| Details | File | 1 | pazartesipdf.exe |
|
| Details | File | 1 | invoice2021119.pdf |
|
| Details | File | 1 | company_doc_b247597.exe |
|
| Details | File | 31 | invoice.pdf |
|
| Details | File | 1 | shipmentr129724.pdf |
|
| Details | File | 1 | dhl2021110900001.pdf |
|
| Details | File | 2 | factura_842.pdf |
|
| Details | File | 1 | tkn104183110140.pdf |
|
| Details | File | 1 | inquiry_submittal_adm_switzerland.exe |
|
| Details | File | 1 | items_for_new_project-6109.exe |
|
| Details | File | 1 | kj_09112021__mt-sgwi.exe |
|
| Details | File | 1 | new_ordertcsq_22102021__lifetime.exe |
|
| Details | File | 1 | payment_order.exe |
|
| Details | File | 1 | po__swift_refrigo_-_payment.exe |
|
| Details | File | 1 | po_0096617291.exe |
|
| Details | File | 1 | po_211102.exe |
|
| Details | File | 1 | product_list.exe |
|
| Details | File | 1 | 39449.pdf |
|
| Details | File | 1 | 000mt.exe |
|
| Details | File | 1 | rfq_38383090.exe |
|
| Details | File | 1 | skc360i21092307520.exe |
|
| Details | File | 1 | tender_and_appendix.exe |
|
| Details | File | 1 | 9066721066.pdf |
|
| Details | File | 1260 | explorer.exe |
|
| Details | File | 14 | www.bak |
|
| Details | File | 1 | paymentpdf________________________________.exe |
|
| Details | File | 1 | 2021_novemberpurchaseordertemplate.exe |
|
| Details | File | 1 | 2021_11nttf.exe |
|
| Details | File | 1 | 2021_11stv.exe |
|
| Details | File | 1 | as211108sw.exe |
|
| Details | File | 1 | as211110sw.exe |
|
| Details | File | 32 | copy.exe |
|
| Details | File | 1 | xlxs___________________________________.bat |
|
| Details | File | 1 | 21081111b.exe |
|
| Details | File | 10 | purchase_order.exe |
|
| Details | File | 6 | mq-3019.exe |
|
| Details | File | 3 | swift_copy.exe |
|
| Details | File | 82 | fre.php |
|
| Details | md5 | 4 | 74f26d34ffff049368a6cff8812f86ee |
|
| Details | IPv4 | 3 | 135.181.129.119 |
|
| Details | IPv4 | 2 | 91.121.67.60 |
|
| Details | IPv4 | 1 | 23.88.109.42 |
|
| Details | IPv4 | 3 | 185.215.113.205 |
|
| Details | IPv4 | 1 | 185.183.32.184 |
|
| Details | IPv4 | 1 | 164.132.202.23 |
|
| Details | IPv4 | 1 | 95.181.152.14 |
|
| Details | IPv4 | 1 | 185.215.113.109 |
|
| Details | IPv4 | 6 | 23.254.225.235 |
|
| Details | Url | 1 | http://www.awsul.online/fh3c |
|
| Details | Url | 1 | http://www.baipees.com/teni |
|
| Details | Url | 1 | http://www.bake8teen.com/rht9 |
|
| Details | Url | 1 | http://www.bella-pi.com/nurc |
|
| Details | Url | 2 | http://www.bitrice23.com/bcwg |
|
| Details | Url | 2 | http://www.bits-clicks.com/a49i |
|
| Details | Url | 3 | http://www.busy-clicks.com/e8ia |
|
| Details | Url | 1 | http://www.ckoutim.xyz/b8lb |
|
| Details | Url | 1 | http://www.confled.online/cy88 |
|
| Details | Url | 1 | http://www.dress-ads.com/z4m5 |
|
| Details | Url | 1 | http://www.easybeasts.com/i44q |
|
| Details | Url | 1 | http://www.gulebic.com/e3rs |
|
| Details | Url | 1 | http://www.high-clicks2.com/n652 |
|
| Details | Url | 1 | http://www.jam-nins.com/n7ak |
|
| Details | Url | 1 | http://www.japxo.online/dn7r |
|
| Details | Url | 1 | http://www.lutam.xyz/b3n1 |
|
| Details | Url | 1 | http://www.makrep.online/s3r1 |
|
| Details | Url | 1 | http://www.mcabyv.xyz/hd6y |
|
| Details | Url | 1 | http://www.minismi2.com/u0n0 |
|
| Details | Url | 2 | http://www.posetac.online/dv9n |
|
| Details | Url | 1 | http://www.proach.online/a34b |
|
| Details | Url | 1 | http://www.ranbix.com/w240 |
|
| Details | Url | 1 | http://www.rebles45.com/w8n5 |
|
| Details | Url | 2 | http://www.renaziv.online/ss5s |
|
| Details | Url | 2 | http://www.saint444.com/fqiq |
|
| Details | Url | 1 | http://www.sarjin.xyz/ob7y |
|
| Details | Url | 1 | http://www.seo-clicks7.com/r4gk |
|
| Details | Url | 1 | http://www.smaclo.online/a1f7 |
|
| Details | Url | 1 | http://www.stamore.online/bl8s |
|
| Details | Url | 1 | http://www.tamsef.online/mlk1 |
|
| Details | Url | 1 | http://www.welmovs.xyz/gr1c |
|
| Details | Url | 1 | http://www.yaruky.xyz/wk31 |
|
| Details | Url | 2 | http://23.254.225.235/oga/fre.php |
|
| Details | Url | 1 | http://23.254.225.235/vote/fre.php |
|
| Details | Url | 4 | http://74f26d34ffff049368a6cff8812f86ee.gq/bn111/fre.php |
|
| Details | Url | 2 | http://peakledz.xyz//five/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/bo/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/fd11/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/ga19/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/ga22/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/gb1/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/gb4/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/gb5/fre.php |
|
| Details | Url | 1 | http://secure01-redirect.net/ho/fre.php |